User Manual UMN:CLIV8102465To display the configured system flood guard, use the following command.Command Mode Descriptionshow system-flood-guard EnableGlobal Shows the configured system flood guard.BPDU is still transmitted even if the specific port is blocked by system flood guard.9.11.4 Invalid Traffic GuardA packet storm may occur unexpectly if a large number of invalid packets are received ona port. It can cause the network to slow down or to time out. The V8102 provides the traf-fic guard function that controls the port’s traffic by threshold value. The threshold (%) rateis based on the number of packets per second (pps). Basically, a maximum pps is usuallycalculated when all Ethernet frames are of 64-bytes in length, or the minimum size frame.Because of the Inter-Packet Gap (12 bytes) and preamble (8 bytes), the minimum packetsize becomes 84 bytes.The following table shows the performance numbers in packets per second (pps) for100M, 1G and 10G Ethernet port.Port Speed Bytes/second PPS for 64-byte PPS for 1518-byte100M Port 12,500,000 148,809 8,2341G Port 125,000,000 1,488,095 82,34510G Port 1,250,000,000 14,880,952 823,451The invalid traffic guard function is configured with the threshold rate (%) that is based onpps of the maximum Ethernet port’s bandwidth.Frame size forPPS calculationPacket Type which arecountedThreshold Rate (%) based onPPSAttack-guard 64-byte Multicast, Unicast, Broad-cast1G port: 100% (=1,488,095 pps)10G port: 100% (=14,880,952 pps)Default: High-80%, Low-20%Error-guard 64-byte Error packets 1G port: 100% (=1,488,095 pps)10G port: 100% (=14,880,952 pps)Default: 1%To generate a SNMP trap of invalid traffic guard (attack/error), SNMP trap mode shouldbe “alarm-report” mode.9.11.4.1 Attack GuardA packet storm may unexpectedly occur if a large number of broadcast, unicast, or mul-ticast packets are received on a port. Forwarding these packets can cause the network toii
